A multinational company has deployed its web application in AWS Infrastructure. This application is critical for the company and needs to secure from any type of DDOS attacks. Security Head is looking for global DDOS trends across AWS resources to further strengthen security guidelines within the company & protect resources from DDOS attacks.
Which of the following can be used for monitoring DDOS threats?

Answer options:

A.Use AWS Firewall Manager to download real-time metric reports for DDOS global trends for Amazon resources.
B.Use AWS Shield to download real-time metric reports for DDOS global trends for Amazon resources.
C.Use Amazon SNS to subscribe to global DDOS trends topics for AWS resources.
D.Use AWS Shield global threat dashboard to view near real-time trends for DDOS threats for Amazon resources.

Correct Answer: D
AWS Shield`s global threat dashboard can be used to view DDOS trends for AWS resources like Amazon EC2, Amazon CloudFront, Elastic Load Balancing, and Amazon Route 53. This dashboard provides a near real-time summary of events occurring globally within AWS infrastructure.
Option A is incorrect as using AWS Firewall Manager, we can centrally monitor DDOS attacks on all the resources launched within the account. It will not provide information about trends for DDOS threats for Amazon resources.
Option B is incorrect as these reports are only available post subscribing to AWS Shield Advanced.
Option C is incorrect as subscribing to SNS topics for global DDOS trends is not a valid option.
For more information on AWS Shield, refer to the following URL,
https://docs.aws.amazon.com/waf/latest/developerguide/using-ddos-reports.html